user log in and admin wroking